Lucene search

[email protected]CVE-2010-3288

HistoryOct 23, 2010 - 8:39 p.m.

CVE-2010-3288

2010-10-2320:39:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2010-3288

csrf

hp systems insight manager

sim

vulnerability

hijacking

authentication

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.5%

JSON

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CPENameOperatorVersion
hp:systems_insight_managerhp systems insight managereq4.1
hp:systems_insight_managerhp systems insight managereq4.2
hp:systems_insight_managerhp systems insight managereq6.0
hp:systems_insight_managerhp systems insight managerle6.1
hp:systems_insight_managerhp systems insight managereq5.0
hp:systems_insight_managerhp systems insight managereq4.0

CPE	Name	Operator	Version
hp:systems_insight_manager	hp systems insight manager	eq	4.1
hp:systems_insight_manager	hp systems insight manager	eq	4.2
hp:systems_insight_manager	hp systems insight manager	eq	6.0
hp:systems_insight_manager	hp systems insight manager	le	6.1
hp:systems_insight_manager	hp systems insight manager	eq	5.0
hp:systems_insight_manager	hp systems insight manager	eq	4.0

References

marc.info/?l=bugtraq&m=128768031706686&w=2

www.securitytracker.com/id?1024622

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.5%

JSON

Related for CVE-2010-3288

cvelist1 prion1 securityvulns1